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Specification 



Title of the Invention 



Electronic Voting System and Method of Preventing 



Unauthorized Use of Ballot Cards Therein 
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Background of the Invention 



The present invention relates to an electronic 



voting system in which voting is electronically 
performed by a voting apparatus using a ballot card ^ 

10 issued by an accepting apparatus and, more particularly, 
to an electronic voting system having a function of 
preventing unauthorized use of the ballot card, a method 
of preventing such unauthorized use, and a recording 
medium storing a program. 

15 Currently, voting in an election or the like 

is generally performed in the following manner, A front 
desk and ballot box are prepared in a polling place. In 
the polling place, a ballot sheet is handed to a person 
who has properly completed an acceptance procedure. The 

20 person then writes, on the ballot sheet, the name of a 
candidate for whom the person wants to vote, and casts 
the ballot sheet into the ballot box. 



and voting procedures are separately performed, a ballot 
25 card is issued, instead of a ballot sheet, to a person 
who has properly completed an acceptance procedure. An 
electronic voting system designed to perform electronic 



Likewise, in a polling place where acceptance 
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voting using such ballot cards has been proposed (see. 
e.g.. Japanese Patent Laid-Open No. 6-251048). 

The following problems, however, arise in such 
a conventional electronic voting system. 
5 . Assume that in the conventional electronic 

or.m after a ballot card is issued to a person, 
voting system, aixer a 

tne person carries it out of tne poixin, place wltnout 

If the third person enters the polling place upon 
10 properly co-pletlng en acceptance procedure, he/she can 
perfor. voting twice using his/her own hallot card and 
the ballot card obtained from the above person. Thrs 
leads to the purchase of votes. 

. in addition. If voting cannot be done because 
15 of a faulty ballot card, a ballot card Is reissued. In 
spite of fact that voting has been completed by 
inserting a ballot card Into the voting apparatus, some 
person may intentionally breaK the ballot card and claim 

r^r^i' nflst a votc • However , it xs 
that he/she could not oast a voi. 

20 impossible to discriminate them. 

The technique disclosed In aapanese Patent 
,,ald-Open No. 6-251048 Is based on the premise that an 
election administration terminal having an eligible 
voter database storing election information about 
„ electors Including voting state Information indicating 
an unfinished voting/finished voting state is connected, 
through a communication line such as a LAM . to an 
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accepting terminal which performs an acceptance 
procedure by checking this eligible voter database. 
This reference discloses no arrangement for a case 
wherein an accepting apparatus designed to perform an 
5 acceptance procedure for voting is not connected to a 
voting apparatus designed to perform voting. 
Summary of the Invention 

It is an object of the present invention to 
provide an electronic voting system which can prevent 

10 the unauthorized use of a ballot card, e.g., taking the 
ballot card out of a polling place and transferring it 
to the third person, a method of preventing the 
unauthorized use of a ballot card in the system, and a 
storage medium recording a program for preventing the 

15 unauthorized use of a ballot card. 

It is another object of the present invention 
to provide an electronic voting system which can 
discriminate a case wherein voting could not be 
performed because of a faulty ballot card from a case 

20 wherein a voter intentionally. broke or lost a ballot 
card and claims that he/she could not cast a vote, and 
prevent double voting by unauthorized reissuance of a 
ballot card, a method of preventing the unauthorized use 
of a ballot card in the system, and a storage medium 

25 recording a program for preventing the unauthorized use 
of a ballot card. 

In order to achieve the above objects. 
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according to the present invention, there is provided an 
electronic voting system comprising a ballot card, an 
accepting apparatus which issues a ballot card in 
accordance with a vote acceptance request, and at least 
5 one voting apparatus which performs voting processing in 
accordance with a vote request using the ballot card, 
wherein the accepting apparatus includes acceptance time 
recording means for recording acceptance time on the 
ballot card when issuing the ballot card, and the voting 

10 apparatus includes timeout detecting means for, before 
performing voting processing upon reception of a vote 
request, determining whether or not a preset timeout 
time has elapsed from the acceptance time recorded on 
the ballot card to the time of voting, and warning 

15 display means for outputting a warning message when the 
timeout detecting means determines that the timeout time 
has elapsed. 

Brief Description of the Drawings 

Fig. 1 is a block diagram showing the 
20 arrangement of the first embodiment of the present 
invention; 

Fig. 2 is a block diagram showing a timeout 
detecting section in the arrangement of the first 
embodiment of the present invention; 
25 Fig. 3 is a flow chart showing operation at 

the time of acceptance in the first embodiment of the 
present invention; 
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Fig, 4 is a flow chart showing operation at 
the time of voting in the first embodiment of the 
present invention; 

Pig. 5 is a flow chart showing operation at 
5 the time of identity verification in the first 
embodiment of the present invention; 

Fig. 6 is a flow chart showing operation at 
the time of identity verification/ballot card issuance 
in the first embodiment of the present invention; 
10 Fig. 7 is flow chart showing operation at the 

time of a voter ID search in the first embodiment of the 
present invention; 

Fig- 8 is a flow chart showing operation at 
the time of end of electronic voting in the first 
15 embodiment of the present invention; 

Figs. 9A and 9B are views schematically 
showing the first embodiment of the present invention; 

Fig. 10 is a view showing the arrangement of 
the second embodiment of the present invention; 
20 Fig. 11 is a flow chart showing the. operation 

of the second embodiment of the present invention; 

Fig. 12 is a view showing the arrangement of 
the third embodiment of the present invention; and 

Fig. 13 is a flow chart showing the operation 
25 of the third embodiment of the present invention. 
Description of the Preferred Embodiments 

The first embodiment of the present invention 
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will be described in detail next with reference to the 
accompanying drawings. 

As shown in Fig. 1, an electronic voting 
system according to this embodiment is comprised of an 
5 accepting apparatus 11, voting apparatus 21, and ballot 
card 31. 

The accepting apparatus 11 includes an 
acceptance time recording section 12, a voter 
information storage section 13, a voter ID recording 

10 section 14 connected to the voter information storage 
section 13, and an erasing section 15. The acceptance 
time recording section 12 writes the current time in an 
acceptance time recording area 32 of the ballot card 31 
(to be described later). 

15 On the voter information storage section 13, 

voter information, e.g., information (voter ID) for 
uniquely identifying a voter is receded. When a ballot 
card (to be described later) is inserted, the voter ID 
recording section 14 retrieves information (voter ID) 

20 for uniquely identifying the voter who has completed an 
acceptance procedure from the voter information storage 
section 13, and writes the voter ID in a voter ID 
recording area 33 of the ballot card 31. The erasing 
section 15 erases the information recorded on a voting 

25 status recording area 34 of the ballot card 31. 

The acceptance time recording section 12, 
voter ID recording section 14, and erasing section 15 
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„e i-ple-nte. .y =.us.n8 a CPU (CentraX Processing 
U„i., incorporate* in t.e accepting apparatus U to ioa. 

^ a recording medium such as 

computer programs recorded on a recordx 

a hard disk into the main memory. 

such computer programs may be loaded by 

.ma a recording medium such as a CD-ROM on 
directly mounting a recoruj- a 

wnich tne programs are recorded in a drive unit, 
^ternativexy. tno computer program -nay be aownioa.ea 

...oug. a computer networK sue. as t.e 

01 includes an acceptance 
The voting apparatus 21 xncluaes 

..«T, 92 a timeout value storage section 
time reading section 22, a timeo 

23 a timeout detecting section 24 connected to the 
acleptance time reading section 22 and timeout value 

4- • on 23 and an unauthorized use warning 
storage sectxon 23. ana an 

^ *•« i-he timeout detecting 
15 display section 25 connected to the txme 

section 24. 

4-„o 91 also includes a voter 
The voting apparatus 21 also in 

.^on 26 a voter ID list recording section 
ID reading section 26, a vov 

„ connectea to tne voter ID reading section 26 . and a 
.0 voter ID list storage section 28 connected to t.e voter 
ID list recording section 27. 

The voting apparatus 21 further includes a 

= iroter ID search section 2B 
voter ID input section 2A. a voter ID 

rn net Storage section 28 and 
connected to the voter ID Ixst storag 

,5 voter ID input section 2A. a voter ID search result 
..splay section 2C connected to the voter ID search 

deletion 2D connected 
. „^ Tr» list erasxng sectx'-'" 
section 2B. a voter ID ixsx ei 
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to the voter ID list storage section 28, and a voting 
status recording section 29. 

When the ballot card 31 is inserted, the 
acceptance time reading section 22 is connected to the 
5 acceptance time recording area 32 to read the acceptance 
time recorded on the acceptance time recording area 32 
of the ballot card 31. 

As shown in Fig. 2, the timeout detecting 
section 24 includes a timeout determining section 24a 

10 and control section 24b. The timeout determining 

section 24a checks whether or not a timeout has occurred 
from the acceptance time, on the basis of the acceptance 
time read by the acceptance time reading section 22, the 
timeout value recorded on the timeout value storage 

15 section 23, and the current time. The control section 
24b is connected to the timeout determining section 24a 
and controls, upon occurrence of a timeout, the 
unauthorized use warning display section 25 to output a 
warning message. 

2.0 The timeout determining section 24a checks 

whether or not the elapsed time from the acceptance time 
to the current time is equal to or less than the timeout 
value. If the elapsed time from the acceptance time to 
the current time is equal to or more than the timeout 

25 value, the timeout determining section 24a determines 
that a timeout has occurred. 

When the ballot card 31 is inserted, the voter 
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X„ reaam, section 2« is connected to the voter ID 
„co..in, area 33 to rea. tne vote. ID «co.aea on t.e 

„ The voter ID list recording 
voter ID recording area 33 . The vo 

The voter ID search section 2B searches the 
„ter ID list read fro„ the voter ID list storage 

. ^he mout voter ID input from the voter 
section 28 for the input voi 

. • 01 and displays the search result on 
10 ID input section 2&, and oisp i 

the voter ID search result display section 2C . 

If voting is normally completed, the voting 
status recording section 29 records information 
indicating completion of voting on the voting status 

,^ „f the ballot card 31. The voter ID 
15 recording area 34 of the oaxj-o 

list erasing section 2D erases the voter ID list 
recorded on the voter ID list storage section (28,. 

The functions of the respective sections 

described above are Implemented by causing the CPU 

^^a^-iiQ 21 to load computer 
20 incorporated in the voting apparatus 

programs con^uter programs recorded on a recording 
„edium such as a hard disK into the main memory. 

such computer programs may be loaded by 
.irectly mounting a recording medium such as a CD-KOM on 
Which the programs are recorded in a drive unit. 
Alternatively, the computer programs may be downloaded 
through a computer networK such as the Internet. Note 
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^rir.T^ 9 A nrovides a means for 
that the voter ID input section 2A prov 

, . voter ID as a search target to the votxng 
inputting a voter ±u 

apparatus 21. ^ „^ 

The hallot card 31 mcludes the acceptance 

voter ID recording area 33. and 
, ti^e recording area sa. voter 

voting status recording area 34. «hen t 

31 ,s inserted into the accepting apparatus 11. the 

recording area 32 is connected to the 
acceptance time record the acceptance 

acceptance ti.e recording section 12. and the 
,0 time is recorded on the acceptance ti^ recording area 



V. no^ card 31 is inserted into the 
When the ballot cara 

* o 1 1 the voter ID recording area 33 
accepting apparatus 11. the vo 

t«d to the voter ID recording section 14. and 
is connected to ^^^^.^^ 

15 the voter ID is recorded on the voter 

.-no status recording area 34, informatxon 
33 on the voting status rev. 

. ther or not voting has heen done by usxng 
indicating whether or not v 

the ballot card 31 is recorded. 

,0 Of cards capahle o. recording information, such as a 
magnetic card and IC card, can he used. 

The operation of the first emhodiment of 

• ,.„tion will be described next with reference 
present xnventxon wxxj- 

to Fiqs. 3 to 8. 

P,,. 3 Shows the flow Of acceptance processing 

" the accepting apparatus 11. .irst of .11. a voter or 

: attendant in a polling place inserts the ballot card 
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31 into the accepting apparatus 11 (step Al). As the 
ballot card 31, a card prepared in the polling place is 
used. 

When the ballot card 31 is inserted, the 
5 acceptance time recording section 12 of the accepting 
apparatus 11 records the acceptance time on the 
acceptance time recording area 32 of the ballot card 31 
(step A2) • 

The voter ID recording section 14 searches the 
10 voter information storage section 13 for the ID of the 
voter to be accepted, and records the corresponding ID 
on the voter ID recording area 33 of the ballot card 31 
(step A3) . 

In this case, as a method of searching for 
15 voter IDs, for example, the following method is used. 
Vote request notifications on which bar codes are 
printed are sent to voters in advance. The bar code 
reader connected to the accepting apparatus 11 is used 
to read each bar code, thereby searching for the 
20 corresponding ID. 

In this case, in order to cope with voters who 
forget to bring vote request notifications with them, 
the accepting apparatus 11 preferably has a function of 
specifying voter IDs by selecting addresses /names from a 
25 list or a function of specifying voter IDs by directly 
inputting addresses/names through a keyboard. 

For example, a voter ID specifying section 16 
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having the above function is connected to the voter 
information storage section 13 and voter ID recording 
section 14. This make it possible to search for a voter 
ID on the basis of an input address/name and the voter 
5 information storage section 13. The voter ID recording 
section 14 therefore can write the voter ID in the 
ballot card 31. 

The erasing section 15 clears the voting 
status recording area 34 of the ballot card 31 (step A4)» 

10 Since information indicating whether or not 

voting has been done by using the ballot card 31 is 
recorded on the voting status recording area 34, this 
area must be initialized at the time of acceptance. In 
this manner, the acceptance time and voter ID are 

15 recorded on the ballot card 31 to complete a series of 
operations in acceptance processing. The voter or an 
attendant in the polling place then removes the ballot 
card 31 from the accepting apparatus 11 (step A5). 

Subsequently, the voter moves the voting 

20 apparatus 21 (or one of a plurality of voting 
apparatuses) to cast a vote. 

The flow of voting processing in the voting 
apparatus 21 will be described with reference to Fig. 4. 

First of all, the voter inserts the ballot 

25 card 31 into the voting apparatus 21 (step Bl). In the 
voting apparatus 21, the acceptance time reading section 
22 reads the acceptance time from the acceptance time 
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recording area 32 of the ballot card 31. In addition, 
the voter ID reading section 26 reads the voter ID from 
the voter ID recording area 33 of the ballot card 31 
(step B2) . 

5 The timeout detecting section 24 reads the 

preset timeout value from the timeout value storage 
section 23 (step B3). 

The acceptance time read by the acceptance 
time reading section 22, the timeout value, and the 

10 current time are compared with each other (step B4). If 
the elapsed time from the acceptance time to the current 
time is equal to or more than the timeout value, the 
voting apparatus 21 displays, on the unauthorized use 
warning display section 25, a warning message indicating 

15 the possible unauthorized use of the ballot card 31 
(step B5) . 

The warning message includes, for example, 
expressions informing the voter that an abnormally long 
period of time has elapsed from the acceptance procedure 

20 to voting, and the voter needs to return to the 

accepting apparatus 11 to check whether or not he/she is 
the person himself who has completed the acceptance 
procedure. Upon seeing this warning message, the voter 
returns to the accepting apparatus 11 to verify his/her 

25 identity. 

It is determined as a result of comparison in 
step B4 that the elapsed time from the acceptance time 
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to the current time is less than the timeout value (step 
B4: NO), normal voting processing is performed (step B6), 
When voting is normally completed, the voting status 
recording section 29 records, on the voting status 
5 recording area 34, voting information indicating that 
voting is finished (step B7). 

The voter ID list recording section 27 records 
the voter ID read in step 82 on the voter ID list 
storage section 28 (step B8) The voter then removes the 

10 ballot card 31 from the voting apparatus 21 (step B9). 

Operation to be performed when a warning 
message is displayed in step B5, and the voter returns 
to the accepting apparatus 11 to verify his/her identity 
will be described with reference to Fig. 5. 

15 When the voter returns to the accepting 

apparatus 11, an attendant in the polling place acquires 
an address /name from the voter by inquiring, and finds 
the voter ID using the accepting apparatus 11 (step CI). 

As described above, the accepting apparatus 11 

20 includes the voter ID specifying section 16 having a 
function of specifying voter IDs by selecting 
addresses/names from a list or a function of specifying 
voter IDs by directly inputting addresses /names through 
a keyboard. 

25 As described above, the voter ID specifying 

section 16 is connected to the voter information storage 
section 13 and voter ID recording section 14 to find a 
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voter ID on the basis of an input address /name and the 
voter information storage section 13. The found voter 
ID is written on the ballot card 31 by the voter ID 
recording section 14. 
5 The attendant in the polling place then 

receives the ballot card 31 on which the warning message 
is displayed from the voter and inserts the card into 
the accepting apparatus 11 (step C2). 

The accepting apparatus 11 collates the voter 
10 ID found in step CI with the voter ID read from the 
inserted ballot card 31 (step C3). That is, it is 
checked whether or not the voter ID found in step CI 
coincides with the voter ID read from the inserted 
ballot card 31 . 

15 If the two voter IDs coincide with each other, 

it can be inferred that the ballot card 31 held by the 
voter was given to the voter when he/she completed an 
acceptance procedure by himself /herself , and the voter 
has nothing to do with the unauthorized use of the 

20 ballot card 31, e.g., temporarily taking the ballot card. 
31 out of the polling place and transferring it to the 
third person. 

The voter may claim that a timeout has 
occurred, in spite of the fact that voting has been 

25 finished, and demand reissuance of the ballot card 31. 
The accepting apparatus 11 therefore checks whether or 
not information indicating the completion of voting is 
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recorded on the voting status recording area 34 of the 
ballot card 31 (step C4). 

If information indicating the completion of 
voting is not recorded on the voting status recording 
5 area 34, the accepting apparatus 11 determines that the 
timeout is based on some justifiable cause, e.g., taking 
an abnormally long period of time from the acceptance 
procedure in the accepting apparatus 11 to the insertion 
of the ballot card 31 into the voting apparatus 21 
10 because of congestion in the polling place, and outputs 
the corresponding information. With this operation, the 
flow returns to step Al in Fig. 3, in which the 
attendant in the polling place reissues the ballot card 
31 (step C5) . 

15 If it is determined in step C3 that the voter 

IDs do not coincide with each other, it is determined 
that the voter has taken part in unauthorized use of the 
ballot card 31, e.g., temporarily taking the ballot card 
31 out of the polling place and transferring it to the 

20 third person. If it is determined in step C4 that 
information indicating the completion of voting is 
recorded on the voting status recording area 34, it is 
determined that this act is an illegal act of demanding 
reissuance of the ballot card 31 in spite of the fact 

25 that voting has been finished (step C6). In such a case, 
corresponding information is output, and the attendant 
in the polling place takes action in accordance with 
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each situation. 

Referring to Fig. 5, the processing of finding 
a voter ID (step CI) and the processing of inserting the 
ballot card 31 into the accepting apparatus 11 (step C2) 
5 can be done in an arbitrary order. In addition, the 
processing of checking whether or not the voter IDs 
coincide with each other (step C3) and the processing of 
checking whether or not information indicating the 
completion of voting is recorded on the voting status 
10 recording area 34 (step C4) can be done in an arbitrary 
order . 

Operation to be done when a warning message is 
displayed in step B5, and the voter returns to the 
accepting apparatus 11 to verify his/her identity may 

15 also be done by the method shown in Fig. 6. 

In the above method, the processing of 
verifying a voter's identity in Fig. 5 and the 
processing of reissuing the ballot card 31 in Fig. 3 
when the voter's identity is verified are independently 

20. performed. In the method shown in Fig. 6, these two 

processes are performed in a series of operations. More 
specifically, when the voter returns to the accepting 
apparatus 11, the attendant in the polling place 
receives the ballot card 31 on which a warning message 

25 ' is displayed from the voter, and inserts it into the 
accepting apparatus 11 (step C7). 

The attendant in the polling place acquires an 
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^ ™ voter bv inquiring, and finds the 
address/name from the voter oy inq 

voter ID using the accepting .PP«.atus 11 (step C8,. As 
described above, the accepting apparatus 11 Includes the 
voter ID specifying section 16 having a function of 
; specifying voter IDs by selecting adaresses/na^es fro. a 
list or a function of specifying voter IDs by directly 
inputting addresses/names through a Keyboard. Therefore. 

section 16. 

0 The accepting apparatus 11 collates the voter 

ID found m step C8 with the voter ID red fro. the 
ballot card 31 Inserted in step C7 (step S9). 

If the two voter IDs coincide with each other, 
.t can be inferred that the ballot card 31 held by the 
15 voter was given to the voter when he/she completed an 
acceptance procedure by himself /herself . and the voter 
has nothing to do with the unauthorized use of the 
hallot card 31. e.g.. temporarily taxing the ballot card 
31 out of the polling place and transferring it to the 

^ voter may be claiming that 

20 third person. However, the voter may 

the timeout has occurred, in spite of the fact that 
voting has been completed, and demanding the reissuance 
of the ballot card 31. For this reason, the accepting 
apparatus 11 checks whether or not information 

-. 4. • ^r, votlna is recorded on the 
25 indicating the completion of voting is 

«T-*»a 34 Of the ballot card 31 
voting status recording area J4 oi 

(step CIO) . 
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If information indicating the completion of 
voting is not recorded on the voting status recording 
area 34, the accepting apparatus 11 determines that the 
timeout is based on some justifiable cause, e.g., taking 
5 an abnormally long period of time from the acceptance 
procedure in the accepting apparatus 11 to the insertion 
of the ballot card 31 into the voting apparatus 21 
because of congestion in the polling place. In this 
case, the time recorded on the acceptance time recording 

10 area 32 of the ballot card 31 is rewritten into the 
current time (step Cll). 

The ballot card 31 is then removed from the 
accepting apparatus 11 (step C13). 

If it is determined in step C9 that the voter 

15 IDs do not coincide with each other, it is determined 

that the voter has taken part in unauthorized use of the 
ballot card 31, e.g., temporarily taking the ballot card 
31 out of the polling place and transferring it to the 
third person. If it is determined in step CIO that 

20 information indicating the completion of voting is 

recorded on the voting status recording area 34, it is 
determined that this act is an illegal act of demanding 
reissuance of the ballot card 31 in spite of the fact 
that voting has been finished (step C12). In such a 

25 case, corresponding information is output, and the 
attendant in the polling place takes action in 
accordance with each 3ituation. 
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Referring to Fig. 6. the processing of 
inserting tne .allot car. 31 into the 
apparatus 11 (step C7) an* the processing of fining 
voter ZD (Step C8, can he aone in an arhitrar, or.er 
, aaaition. the processing of checKing ^ « "J 
.he voter IDs coincide with each other (step C and 
processing of checKing whether or not information 
indicating the completion of voting is — ^J" "^^ 

^,r.n area 34 (step CIO) can be done 
voting status recording area 34 ^ 

10 in an arbitrary order. 

furthermore. s»e voter »ay denan* reissuance 

.he hallot car* 31. claiming that voting couia not he 

cope With such a deman*. the accepting apparatus 11 

. rn .necifving section 16 having the 
15 includes the voter ID specifying 

function Of specifying voter lOs hy selecting 
aadresses/names from a list or the function of 
specifying voter IDS hy directly inputting 

eadresses/names through a Keyboard, and specifies 

The apparatus then checks xn 
20 voter ID of this person.. The appa 

^ ^ r.€ v±a 1 whether or not 
accordance with the flow chart of Fig. 

the person has finished voting. 

,n attendant in the polling place (preferably, 
the superintendent in the polling place or a person 
,S designated by the superintendent) inputs the voter XD to 
he Checked to the voting apparatus .1 by using the voter 

««r.i« the voter ID input 
^ ^^^-nr%n 9 A For example, tne vv^u^ 
ID input sectxon jla* 
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..put .evice such as a Xey.oar. unliXe a general 

..r Therefore, characters that can be 
personal computer. There 

input are displayed on the screen to allow 

4. ««n^«,fiarv information (step Dl). 
i to input necessary in 

The voter ID search sectxon 2B reads ou 

A .roter IDS from the voter ID list 
list of recorded voter lus. 

« , 4.^r^ no^ The attendant then 
storage section 28 (step D2) . xne 

0 us^. tne vote. XO .np«. seC.on (step 03.^ 

.earc. resuX. is aispXavea on t.e vo.e. XO sea.cn 

alsplay section 2C (step D4). , , « „e 

If a plurality of voting apparatuses 21 are 

,-, «iace the attendant in the 
installed in the pollxng place, tn 

..llln. Place per.or.s sucn searc. P—^- J^n^^ 
aspect to all tne voting apparatuses 21. The 

„, the ballot card 31 only when rt is 
permits reissuance of the Ban 

^ ID IS not recoraea on any of 

aeterminea that the voter ID 

the voting apparatuses 21 . , . , ^^^^ 

Electronic voting is performea until the 
" electronic voting ena time while the ahove processing's 
performea. Xn aue ti^e. the electronic voting ena t^e 
Llcome. Pig. a Shows operation to .e performea When 
.he electronic voting ena time has come, ana processing 

25 at the end time is performed. 

««^atus 21 checks whether or not 
The voting apparatus cii« 

. n^rform processing at the end time has 

an instruction to perform pro 
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been issued (step El). If a termination instruction has 
been issued, termination processing such as digital 
signature on a recording medium on which voting data is 
stored is performed. In termination processing, the 
5 voter ID list erasing section 2D erases all the voter 
IDs from the voter ID list storage section 28 (step E2). 

It is then checked whether or not an 
instruction to perform power OFF processing has been 
issued. If a power OFF instruction has been issued, the 

10 power is turned off (step E3). 

The first embodiment of the present invention 
performs the operations described above. These 
operations will be described with reference to schematic 
views of Figs. 9A and 9B. 

15 Operation in a case wherein the timeout of the 

ballot card 31 is to be determined will be described 
with reference to Fig. 9A. Time stamp information "Tl" 
of the acceptance time and the ID of a voter "A" are 
recorded on the ballot card 31 issued by the accepting 

20 apparatus 11. 

When the ballot card 31 is inserted into the 
voting apparatus 21, the voting apparatus 21 reads the 
time stamp information "Tl" of the acceptance time, and 
calculates the elapsed time until current time "T2". 

25 The voting apparatus 21 then checks whether or not the 
elapsed time is equal to or more than a predetermined 
timeout time "T3". If "T2 - Tl < T3", it is determined 
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that the ballot card 31 is normally used, and normal 
voting processing is performed. When voting is normally 
finished, the ID of the voter "A" is recorded on the 
voting apparatus 21* 
5 If "T2 - Tl > T3", the unauthorized use of the 

ballot card 31 is suspected, e.g., it is suspected the 
voter "A" took the ballot card 31 out of the polling 
space and transferred it to a voter "B", and a 
corresponding warning message is output. Thereafter, 

10 the accepting apparatus 11 collates the voter ID of the 
voter who is holding the ballot card 31 with the voter 
ID recorded on the ballot card 31. 

Operation to be performed when it is necessary 
to check whether a voter has finished voting, e.g., a 

15 case wherein after the ballot card 31 is issued, the 

voter claims that he/she cannot cast a vote because the 
ballot card 31 is broken (a case wherein it cannot be 
discriminated whether the card is really broken or the 
card was intentionally broken) will be described with 

20 reference to Fig. 9B. 

A voter ID as a search target is input to the 
voting apparatus 21 to search the set of voter IDs 
recorded on the voting apparatus 21 for the 
corresponding voter ID. The search result is then 

25 output. The ballot card 31 is reissued only when there 
is no corresponding voter ID. 

Note that the voter ID recorded on the voting 
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apparatus 21 is recorded on an area different from a 
voting result recording section 30 on which the voting 
result is receded. With this operation, by erasing the 
voter ID recorded on the voter ID list storage section 
5 28 at the end of electronic voting, the relation between 
this record and the voting result or personal 
information associated with this record can be concealed. 

The second embodiment of the present invention 
will be described next in detail with reference to 
10 Fig. 10. 

An electronic voting system of this embodiment 
provides another method of inputting a voter ID in 
checking whether or not a voter ID as a search target is 
stored in a voter ID list storage section 28 of a voting 

15 apparatus 21. The remaining arrangements are the same 
as in the first embodiment. 

In the first embodiment, a voter ID is 
manually input from the touch panel. In the second 
embodiment, an accepting apparatus 11 issues a voter ID 

20 checking card 41 for checking a voter ID, and the card 
is inserted into the voting apparatus 21 to allow the 
voting apparatus 21 to recognize the voter ID as a 
search target. 

A checking identifier 41a and checking voter 

25 ID 41b are receded on the voter ID checking card 41. 
The checking identifier 41a indicates information for 
identifying the checking card. The checking voter ID 
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41b indicates a voter ID as a search target. 

The accepting apparatus 11 also Includes an 
input section 17 for Inputting a voter ID. a voter ID 
storage section 18 for storing the voter ID. and a 

4-^^ TH T-ecording section 19 which is 
5 checking voter ID recorama 

connected to the Input section 17 and voter ID storage 
section 18 and writes at least one of the checKlng 

/■hAcklna voter ID 41b on the 
Identifier 41a and the cheoKing vo 

voter ID checking card 41. 
10 The voting apparatus 21 further Includes a 

checking voter ID reading section 51 for reading a 
checking voter ID when the application specific 
Identifier Indicating an application, which Is recorded 
on the inserted card and Is read therefrom. Is the 

15 checking identifier 41a. 

^ ^r^ v^a 11 the voting apparatus 21 
As shown in Fig. J-J-f 

«ads the application specific Identifier of the card 
Srom the card (step Fl). If this card Is not a voter ID 

<, roi-*.n F2. NO), normal voting processing xs 
checking card (step FZ. wuj, 

a„ performed (Step P5,. If the card Is a voter ID checking 
card (Step F2= YES,, a voter ID Is read from the card 
(Step r3,. and the flow advances to step D2 In Fig. 7. 
and a voter ID search section 2B searches for the voter 
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The third embodiment of the present invention 
will be described in detail next with reference to the 



accompanying drawings. 
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« ^« Via 12 an electronic voting 
As shown in rig. cu» « 

system accoralns to this smbodinent has an arrangement 
m Which voting apparatuses 2U to 21„ are connected 
through a networK 80. Each of the voting apparatuses 
5 21. to 21. has the same arrangement as that of the 
voting apparatus 21 described above. 

in this electronic voting system, a voter ID 
search section 2B of each voting apparatus is designed 
to return a result with respect to a search request 
10 through the networK 80. This maKes it possible for one 
voting apparatus to search the voter IDs recorded on all 

the voting apparatuses. 

The operation of the electronic voting system 
according to this embodiment will be described next with 

15 reference to Fig. 13- 

The voting apparatus 2U reads the application 

specific identifier of a card therefrom (step Gl). If 
this card is not a voter ID checking card (step 02: NO), 
normal voting processing is performed (step 04,. If the 
,0 oard is a voter ID checking card (step G2: .ES, . a voter 
ID is read from the voter ID checKing card (step G3). 

The voting apparatus 2U checKs whether or not 

^ Tf the ID is stored (step 

the read voter ID is stored. If the xu 

G5: YES), the voting apparatus 21. displays the search 

25 result (step G8) . 

If the ID is not stored (step G5: NO), the 

voting apparatus 21. transmits the voter ID to each of 
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the voting apparatuses 2I2 to 2 In connected through the 
network 80 to request a search (step G6). 

If a search result is returned from any one of 
the voting apparatuses, the voting apparatus 21i 
5 displays it (step G7). For example, the result is 
displayed on the voting apparatus which has read the 
voter ID. 

Note that when a voter ID is to be input from 
a touch panel as in the first embodiment described above, 
10 the voting apparatuses 21i to 21n are connected through 
a computer network. Inputting a voter ID as a search 
target from the touch panel of the voting apparatus 21 
makes it possible to search all the voting apparatuses 

2I1 to 21n. 

15 The voting apparatus 21i checks whether or not 

the voter ID is stored. If the voter ID is not stored, 
the voting apparatus 21i sends the voter ID to the 
voting apparatuses 2I2 to 2 In to request them to search 
for the voter ID. When a search result is returned from 

20 any one. of the voting apparatuses, the voting apparatus 
2I1 displays it. For example, this result is displayed 
on the voting apparatus which has read the voter ID. 

As has been described above, according to the 
embodiments of the present invention, the accepting 

25 apparatus records the acceptance time on a ballot card. 
If the elapsed time since the voter inserted the ballot 
card into the voting apparatus is equal to or more than 
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a predetermined time, a warning is generated. This 
makes it is possible to prevent the unauthorized use of 
a ballot card. e.g.. temporarily taking the ballot card 
out of the polling place and transferring it to the 

5 third person. 

In addition, according to the embodiments, the 

accepting apparatus records a voter ID on a ballot card. 

When voting is normally finished, the voter ID is 

recorded on the voting apparatus to allow a search 
10 afterward. This makes it possible to discriminate a 

case wherein voting could not be done because of a 
faulty ballot card from a case wherein a voter 
intentionally broke or lost a ballot card and claims 
that he/she could not cast a vote, thereby preventing 
15 double voting due to unauthorized reissuance of a ballot 
card. 
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